docs: add CHANGELOG, SECURITY, CoC, issue templates, badges for v1.2.0

Community infrastructure:
- CHANGELOG.md documents v1.0.0 through v1.2.0
- SECURITY.md with privacy pledge (no telemetry)
- CODE_OF_CONDUCT.md adapted from Contributor Covenant 2.1
- Bug report + feature request issue templates
- PR template with scope checks
- README badges (version, license, Claude Code, Bun, stars, issues)

Package:
- Bump version to 1.2.0
- Expand keywords for discoverability (12 keywords)

Author: kevintseng

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -0,0 +1,70 @@
+name: Bug Report
+description: Report a bug in gstack-industrial
+title: "[Bug]: "
+labels: ["bug"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for reporting a bug. Please fill in the details below.
+
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: What happened?
+      description: A clear description of the bug.
+      placeholder: e.g. "Skill router stopped suggesting after ~10 messages"
+    validations:
+      required: true
+
+  - type: textarea
+    id: expected
+    attributes:
+      label: Expected behavior
+      description: What did you expect to happen?
+    validations:
+      required: true
+
+  - type: textarea
+    id: reproduce
+    attributes:
+      label: Steps to reproduce
+      placeholder: |
+        1. Run `bun install`
+        2. Say "I need to debug a bug"
+        3. ...
+    validations:
+      required: true
+
+  - type: input
+    id: version
+    attributes:
+      label: gstack-industrial version
+      placeholder: v1.2.0
+    validations:
+      required: true
+
+  - type: dropdown
+    id: os
+    attributes:
+      label: Operating System
+      options:
+        - macOS
+        - Linux
+        - Windows (WSL)
+        - Other
+    validations:
+      required: true
+
+  - type: textarea
+    id: config
+    attributes:
+      label: Your skill-router.json config
+      description: Paste `~/.claude/config/skill-router.json` (remove any sensitive info)
+      render: json
+
+  - type: textarea
+    id: logs
+    attributes:
+      label: Error output or logs
+      render: shell

.github/ISSUE_TEMPLATE/feature_request.yml

@@ -0,0 +1,41 @@
+name: Feature Request
+description: Suggest a new feature or improvement
+title: "[Feature]: "
+labels: ["enhancement"]
+body:
+  - type: markdown
+    attributes:
+      value: |
+        Thanks for suggesting an improvement. Keep in mind: gstack-industrial is an enhancement layer on gstack. Features that duplicate gstack functionality are out of scope.
+
+  - type: textarea
+    id: problem
+    attributes:
+      label: Problem you're trying to solve
+      description: What are you trying to do? What's blocking you?
+    validations:
+      required: true
+
+  - type: textarea
+    id: proposal
+    attributes:
+      label: Proposed solution
+      description: What would the ideal behavior look like?
+    validations:
+      required: true
+
+  - type: textarea
+    id: alternatives
+    attributes:
+      label: Alternatives considered
+      description: Other approaches you've thought about
+
+  - type: checkboxes
+    id: scope-check
+    attributes:
+      label: Scope check
+      description: gstack-industrial scope
+      options:
+        - label: This is about skill suggestion/routing (not skill content)
+        - label: This doesn't duplicate something gstack already does
+        - label: This doesn't require network calls or telemetry

.github/PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,26 @@
+## What changed
+
+<!-- 1-2 sentence summary -->
+
+## Why
+
+<!-- Problem this solves or value this adds -->
+
+## Type of change
+
+- [ ] Bug fix
+- [ ] New feature
+- [ ] Documentation update
+- [ ] Refactor / cleanup
+- [ ] Breaking change
+
+## Testing
+
+<!-- How did you verify this works? -->
+
+## Scope check
+
+- [ ] Doesn't duplicate gstack functionality
+- [ ] No network calls / telemetry added
+- [ ] Local state only (if new state)
+- [ ] Documentation updated (README/CHANGELOG)

CHANGELOG.md

@@ -0,0 +1,41 @@
+# Changelog
+
+All notable changes to gstack-industrial.
+
+## [1.2.0] - 2026-04-04 — Learning, Repo-Mode Awareness, Visible Warnings
+
+gstack-industrial now learns from your usage. When you accept a suggestion, it remembers that pair — next time you accept the first skill, it predicts the next one. When you dismiss a suggestion, that skill gets penalized. Plus: repo-mode aware thresholds (lower for solo devs), visible warnings when limits hit (no more silent failure), and cleaner integration with gstack (reuses `gstack-repo-mode` and `timeline.jsonl` instead of duplicating).
+
+### Added
+
+- **Usage feedback loop.** Tracks accept/dismiss per skill in `~/.claude/sessions/skill-router-feedback.json` (local only). After 3+ interactions, boosts priority for accepted skills, penalizes dismissed ones. Tunable via `feedbackBoost` and `feedbackPenalty` config.
+- **Pair learning.** Reads gstack's `timeline.jsonl` to detect skill sequences (e.g., `brainstorming → writing-plans → executing-plans`). After you accept a skill, the predicted next skill gets a strong priority boost. Shows "(based on your pattern)" hint.
+- **Repo-mode aware thresholds.** Uses `gstack-repo-mode` binary to detect solo vs collaborative repos. Default thresholds: solo=60 (more proactive), collaborative=85 (less noise), unknown=80. Tunable via `repoModeThresholds` config.
+- **Visible limit warnings.** When suggestion limit is hit, shows a warning instead of silently exiting. Tunable via `showLimitWarnings`.
+- **Config migration.** `install.ts` now adds missing fields to existing configs on reinstall (no more manual upgrades).
+
+### Changed
+
+- **Default `maxSuggestionsPerSession`: 10 → 500.** The cooldown is the real throttle. 10 was too low for long dev sessions, causing silent failures.
+- **Reuse gstack infrastructure.** Repo mode detection and skill sequences now come from gstack, not duplicated here. gstack-industrial is an enhancement layer on top of gstack.
+- **Privacy-first messaging.** README emphasizes local-only state, no telemetry.
+
+### Fixed
+
+- **Silent failure when limit reached.** Previously, hitting `maxSuggestionsPerSession` would silently stop suggestions with no notification. Now shows a visible warning with the config path.
+
+## [1.1.1] - 2026-03-26
+
+- Session state reset and doc cleanup
+
+## [1.1.0] - 2026-03-26
+
+- **Auto-Discovery.** Scans all installed SKILL.md files on session start, builds routing rules automatically. Manually-written rules are protected via `autoDiscovered: true` flag.
+
+## [1.0.0] - 2026-03-19
+
+- Initial release
+- Skill router with smart matching
+- UserPromptSubmit hook for auto-suggestions
+- Anti-spam mechanisms (cooldown, session caps)
+- Template system with shared standard sections

CODE_OF_CONDUCT.md

@@ -0,0 +1,29 @@
+# Code of Conduct
+
+## Our Pledge
+
+We pledge to make participation in the gstack-industrial community a harassment-free experience for everyone, regardless of age, body size, disability, ethnicity, gender identity and expression, level of experience, nationality, personal appearance, race, religion, or sexual identity and orientation.
+
+## Standards
+
+**Good:**
+- Respectful, constructive communication
+- Focusing on what is best for the community
+- Showing empathy towards other community members
+- Technical disagreement, respectfully expressed
+
+**Not acceptable:**
+- Harassment, trolling, or insulting comments
+- Personal attacks
+- Publishing others' private information
+- Conduct which could reasonably be considered inappropriate
+
+## Enforcement
+
+Violations may be reported to the project maintainer via GitHub issues (mark as confidential) or private security advisory.
+
+Maintainers will review and respond. Repeated violations may result in being blocked from the repository.
+
+## Attribution
+
+Adapted from the [Contributor Covenant](https://www.contributor-covenant.org/), version 2.1.

README.ja.md

@@ -1,11 +1,24 @@
+<div align="center">
+
 # gstack-industrial
 
-> [English](README.md) | [繁體中文](README.zh-TW.md) | **日本語**
+**タスクに最適な Claude Code スキルを自動提案**
+
+*[gstack](https://github.com/garrytan/gstack) の上に重ねる拡張レイヤー — 置き換えではない*
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=for-the-badge)](https://opensource.org/licenses/MIT)
+[![Version](https://img.shields.io/github/v/release/kevintseng/gstack-industrial?style=for-the-badge&color=blue)](https://github.com/kevintseng/gstack-industrial/releases)
+[![Claude Code](https://img.shields.io/badge/Claude%20Code-Compatible-D97757?style=for-the-badge)](https://claude.ai/code)
+[![Bun](https://img.shields.io/badge/Bun-1.0+-black?style=for-the-badge&logo=bun)](https://bun.sh)
 
-**Claude Code スキルの自動提案 — gstack の拡張であって、置き換えではない**
+[![Stars](https://img.shields.io/github/stars/kevintseng/gstack-industrial?style=social)](https://github.com/kevintseng/gstack-industrial/stargazers)
+[![Issues](https://img.shields.io/github/issues/kevintseng/gstack-industrial)](https://github.com/kevintseng/gstack-industrial/issues)
 
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Bun](https://img.shields.io/badge/Bun-1.0+-black?logo=bun)](https://bun.sh)
+[**English**](README.md) | [**繁體中文**](README.zh-TW.md) | [**日本語**](README.ja.md)
+
+</div>
+
+---
 
 ---
 

README.md

@@ -1,11 +1,24 @@
+<div align="center">
+
 # gstack-industrial
 
-> **English** | [繁體中文](README.zh-TW.md) | [日本語](README.ja.md)
+**Auto-suggest the right Claude Code skill for your task**
+
+*Enhancement layer on top of [gstack](https://github.com/garrytan/gstack) — not a replacement.*
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=for-the-badge)](https://opensource.org/licenses/MIT)
+[![Version](https://img.shields.io/github/v/release/kevintseng/gstack-industrial?style=for-the-badge&color=blue)](https://github.com/kevintseng/gstack-industrial/releases)
+[![Claude Code](https://img.shields.io/badge/Claude%20Code-Compatible-D97757?style=for-the-badge)](https://claude.ai/code)
+[![Bun](https://img.shields.io/badge/Bun-1.0+-black?style=for-the-badge&logo=bun)](https://bun.sh)
 
-**Auto-suggest the right Claude Code skill for your task — enhancement to gstack, not a replacement.**
+[![Stars](https://img.shields.io/github/stars/kevintseng/gstack-industrial?style=social)](https://github.com/kevintseng/gstack-industrial/stargazers)
+[![Issues](https://img.shields.io/github/issues/kevintseng/gstack-industrial)](https://github.com/kevintseng/gstack-industrial/issues)
 
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Bun](https://img.shields.io/badge/Bun-1.0+-black?logo=bun)](https://bun.sh)
+[**English**](README.md) | [**繁體中文**](README.zh-TW.md) | [**日本語**](README.ja.md)
+
+</div>
+
+---
 
 ---
 

README.zh-TW.md

@@ -1,11 +1,24 @@
+<div align="center">
+
 # gstack-industrial
 
-> [English](README.md) | **繁體中文** | [日本語](README.ja.md)
+**自動建議最適合你任務的 Claude Code skill**
+
+*建立在 [gstack](https://github.com/garrytan/gstack) 之上的增強層 — 不是取代*
+
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg?style=for-the-badge)](https://opensource.org/licenses/MIT)
+[![Version](https://img.shields.io/github/v/release/kevintseng/gstack-industrial?style=for-the-badge&color=blue)](https://github.com/kevintseng/gstack-industrial/releases)
+[![Claude Code](https://img.shields.io/badge/Claude%20Code-Compatible-D97757?style=for-the-badge)](https://claude.ai/code)
+[![Bun](https://img.shields.io/badge/Bun-1.0+-black?style=for-the-badge&logo=bun)](https://bun.sh)
 
-**自動建議 Claude Code skill — 是 gstack 的增強，不是取代**
+[![Stars](https://img.shields.io/github/stars/kevintseng/gstack-industrial?style=social)](https://github.com/kevintseng/gstack-industrial/stargazers)
+[![Issues](https://img.shields.io/github/issues/kevintseng/gstack-industrial)](https://github.com/kevintseng/gstack-industrial/issues)
 
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Bun](https://img.shields.io/badge/Bun-1.0+-black?logo=bun)](https://bun.sh)
+[**English**](README.md) | [**繁體中文**](README.zh-TW.md) | [**日本語**](README.ja.md)
+
+</div>
+
+---
 
 ---
 

SECURITY.md

@@ -0,0 +1,44 @@
+# Security Policy
+
+## Privacy
+
+gstack-industrial is **local-only**. It does not:
+
+- Send telemetry
+- Make network calls
+- Upload usage data
+- Track users
+
+All state (`~/.claude/sessions/skill-router-*.json`) stays on your machine.
+
+## Reporting a Vulnerability
+
+If you find a security issue, please report it privately:
+
+- **GitHub Security Advisories**: https://github.com/kevintseng/gstack-industrial/security/advisories/new
+- **Email**: open a private security advisory via GitHub
+
+Please do **not** open a public issue for security vulnerabilities.
+
+## What to Include
+
+- Description of the vulnerability
+- Steps to reproduce
+- Potential impact
+- Suggested fix (if any)
+
+## Response Time
+
+This is a hobby project maintained in spare time. I'll respond as soon as I can, typically within a week.
+
+## Scope
+
+In scope:
+- Command injection in hook scripts
+- Path traversal in file operations
+- Code execution via malformed config/matchers
+
+Out of scope:
+- Vulnerabilities in Claude Code itself
+- Vulnerabilities in gstack (report to https://github.com/garrytan/gstack)
+- Vulnerabilities in Bun runtime

package.json

@@ -1,6 +1,6 @@
 {
   "name": "gstack-industrial",
-  "version": "1.1.0",
+  "version": "1.2.0",
   "description": "Auto-discover and suggest the right Claude Code skill at the right time",
   "type": "module",
   "scripts": {
@@ -15,11 +15,17 @@
   },
   "keywords": [
     "claude-code",
+    "claude",
     "gstack",
     "ai",
     "automation",
     "skill-router",
-    "template-system"
+    "template-system",
+    "anthropic",
+    "ai-agent",
+    "productivity",
+    "developer-tools",
+    "hook"
   ],
   "author": "Kevin Tseng",
   "license": "MIT",
@@ -37,4 +43,4 @@
   "devDependencies": {
     "@types/node": "^20.0.0"
   }
-}
+}